GSA's $15M Data Breach Monitoring Contract with ID Analytics Raises Concerns Over Value and Competition

Contract Overview

Contract Amount: $15,081,671 ($15.1M)

Contractor: ID Analytics, LLC

Awarding Agency: General Services Administration

Start Date: 2008-12-22

End Date: 2013-12-21

Contract Duration: 1,825 days

Daily Burn Rate: $8.3K/day

Number of Offers Received: 1

Pricing Type: FIRM FIXED PRICE

Sector: Other

Official Description: DATA BREACH MONITORING SERVICE

Place of Performance

Location: WASHINGTON, DISTRICT OF COLUMBIA County, DISTRICT OF COLUMBIA, 20002, UNITED STATES OF AMERICA

State: District of Columbia Government Spending

Plain-Language Summary

General Services Administration obligated $15.1 million to ID ANALYTICS, LLC for work described as: DATA BREACH MONITORING SERVICE Key points: 1. The contract awarded to ID Analytics, LLC for data breach monitoring services represents a significant expenditure of $15,081,670.9. 2. Limited competition is suggested by the lack of detailed information on the procurement process, potentially impacting price discovery. 3. The duration of the contract (5 years) and its focus on sensitive data monitoring warrant scrutiny regarding ongoing necessity and value. 4. The sector involves investigation and personal background check services, highlighting potential privacy and security implications.

Value Assessment

Rating: questionable

The contract's value of $15M over 5 years for data breach monitoring needs closer examination against industry benchmarks. Without clear competition data, assessing if this price reflects fair market value is difficult.

Cost Per Unit: N/A

Competition Analysis

Competition Level: unknown

The procurement method is not specified, making it impossible to assess the level of competition. If this was not a full and open competition, taxpayers may have overpaid.

Taxpayer Impact: The potential for overpayment due to a lack of competition directly impacts taxpayer funds allocated to this service.

Public Impact

Citizens' sensitive personal data is potentially managed under this contract, raising privacy concerns. The effectiveness of data breach monitoring services can be difficult to quantify, making value assessment challenging. Government reliance on third-party vendors for critical security functions like data breach monitoring requires robust oversight.

Waste & Efficiency Indicators

Waste Risk Score: 50 / 10

Warning Flags

Lack of competition details
Unclear value for money
Potential privacy risks

Positive Signals

Service addresses a critical need for data protection

Sector Analysis

The contract falls under investigation and personal background check services (NAICS 561611). Spending in this sector can vary widely based on agency needs and the sensitivity of data being handled.

Small Business Impact

No information is available regarding the involvement of small businesses in this contract, either as prime contractors or subcontractors.

Oversight & Accountability

The limited information provided makes it difficult to assess the specific oversight mechanisms in place for this contract. Robust oversight is crucial for ensuring service delivery and managing risks.

Related Government Programs

Investigation and Personal Background Check Services
General Services Administration Contracting
Federal Acquisition Service Programs

Risk Flags

Lack of transparency in procurement
Potential for non-competitive pricing
Unclear service effectiveness
Undefined data privacy measures
Long contract duration without clear justification

Frequently Asked Questions

What is this federal contract paying for?

General Services Administration awarded $15.1 million to ID ANALYTICS, LLC. DATA BREACH MONITORING SERVICE

Who is the contractor on this award?

The obligated recipient is ID ANALYTICS, LLC.

Which agency awarded this contract?

Awarding agency: General Services Administration (Federal Acquisition Service).

What is the total obligated amount?

The obligated amount is $15.1 million.

What is the period of performance?

Start: 2008-12-22. End: 2013-12-21.

What was the justification for the specific procurement method used for this contract, and how did it ensure fair pricing?

The provided data does not specify the procurement method. Understanding this is crucial for assessing fair pricing. If it was sole-source or limited competition, a detailed justification and price analysis would be expected to ensure the government received fair value. Without this, it's difficult to determine if taxpayers were protected from inflated costs.

How was the effectiveness of ID Analytics' data breach monitoring service measured and validated throughout the contract period?

The data does not include performance metrics or validation reports for the service. Assessing effectiveness requires clear deliverables and measurable outcomes, such as the number of breaches detected, response times, and successful mitigation efforts. Without this, it's hard to confirm the $15M investment yielded the intended security benefits.

What specific types of data were being monitored, and what were the protocols for data handling and privacy protection?

The nature of the data monitored is not detailed, but given the NAICS code, it likely involves sensitive personal information. Robust protocols for data handling, encryption, access control, and breach notification are essential. The absence of this information raises potential privacy risks and questions about compliance with data protection regulations.

Industry Classification

NAICS: Administrative and Support and Waste Management and Remediation Services › Investigation and Security Services › Investigation and Personal Background Check Services

Product/Service Code: SUPPORT SVCS (PROF, ADMIN, MGMT) › ADMINISTRATIVE SUPPORT SERVICES

Contractor Details

Address: 15253 AVENUE OF SCIENCE, SAN DIEGO, CA, 92128

Business Categories: Category Business, Corporate Entity Not Tax Exempt, Not Designated a Small Business

Financial Breakdown

Contract Ceiling: $15,625,000

Exercised Options: $15,081,671

Current Obligation: $15,081,671

Parent Contract

Parent Award PIID: GS23F0054U

IDV Type: FSS

Timeline